1 files changed, 47 insertions, 0 deletions
diff --git a/roundcubemail.nginx b/roundcubemail.nginx
new file mode 100644
index 0000000..8866792
--- /dev/null
+++ b/roundcubemail.nginx
@@ -0,0 +1,47 @@
+location = /roundcubemail {
+    alias /usr/share/roundcubemail/;
+}
+
+location /roundcubemail/ {
+    root /usr/share;
+    index index.php;
+
+    location ~ ^/roundcubemail/bin/(.+)$ {
+        deny all;
+    }
+    location ~ ^/roundcubemail/plugins/enigma/home/(.+)$ {
+        deny all;
+    }
+
+    # Define who can access the installer
+    # keep this secured once configured
+
+    location ~ ^/roundcubemail/installer/(.+\.php)$ {
+        allow 127.0.0.1;
+        allow ::1;
+        deny all;
+
+        try_files $uri =404;
+        fastcgi_intercept_errors on;
+        include        fastcgi_params;
+        fastcgi_param  SERVER_NAME      $host;
+        fastcgi_param  SCRIPT_FILENAME  $document_root$fastcgi_script_name;
+        fastcgi_pass   php-fpm;
+    }
+
+    # Define who can access the Webmail
+    # You can enlarge permissions once configured
+
+    location ~ ^/roundcubemail/(.+\.php)$ {
+        allow 127.0.0.1;
+        allow ::1;
+        deny all;
+
+        try_files $uri =404;
+        fastcgi_intercept_errors on;
+        include        fastcgi_params;
+        fastcgi_param  SERVER_NAME      $host;
+        fastcgi_param  SCRIPT_FILENAME  $document_root$fastcgi_script_name;
+        fastcgi_pass   php-fpm;
+    }
+}